ramnit | 6baab6911846e0c62b92800df7a961a6400daabfb1933b03cb75fdaf08213be8 | Triage

Submit
Reports

Overview

overview

Static

static

1

e5cf8923d2...8.html

windows7-x64

e5cf8923d2...8.html

windows10-2004-x64

3

Sharing

General

Target

e5cf8923d266aa817d467749b126bcda_JaffaCakes118
Size

158KB
Sample

241212-lsv59aznfs
MD5

e5cf8923d266aa817d467749b126bcda
SHA1

bb9e2b7376c45f208f88c91cae972f483edbfb07
SHA256

6baab6911846e0c62b92800df7a961a6400daabfb1933b03cb75fdaf08213be8
SHA512

b7beee2a7f2869fce1c6ace1d48164627287b69e89add7f3224e0b5ce82a6bb5b489f46087c48999bf49b75838042cc6ae7d956419196e8df90f4eb59aae5418
SSDEEP

1536:iXRT3Ltk7Zu/FFSNOHyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:i56tuEiyfkMY+BES09JXAnyrZalI+YQ

Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm

Static task

static1

Behavioral task

behavioral1

Sample

e5cf8923d266aa817d467749b126bcda_JaffaCakes118.html

Resource

win7-20241010-en

ramnit banker discovery spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

e5cf8923d266aa817d467749b126bcda_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  e5cf8923d266aa817d467749b126bcda_JaffaCakes118
- Size
  
  158KB
- MD5
  
  e5cf8923d266aa817d467749b126bcda
- SHA1
  
  bb9e2b7376c45f208f88c91cae972f483edbfb07
- SHA256
  
  6baab6911846e0c62b92800df7a961a6400daabfb1933b03cb75fdaf08213be8
- SHA512
  
  b7beee2a7f2869fce1c6ace1d48164627287b69e89add7f3224e0b5ce82a6bb5b489f46087c48999bf49b75838042cc6ae7d956419196e8df90f4eb59aae5418
- SSDEEP
  
  1536:iXRT3Ltk7Zu/FFSNOHyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:i56tuEiyfkMY+BES09JXAnyrZalI+YQ
Score

10^/10

ramnit banker discovery spyware stealer trojan upx worm
- Ramnit
  Ramnit is a versatile family that holds viruses, worms, and Trojans.
  trojan spyware stealer worm banker ramnit
- Ramnit family
  ramnit
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ramnitbankerdiscoveryspywarestealertrojanupxworm

behavioral2

© 2018-2025

Terms | Privacy